Is my data safe?

Birth data is personal, and we treat it that way. Here's exactly what we keep, how it's protected, and what you can do about it.

What we store

When you create a birth chart we keep your name, email, date of birth, time of birth, place of birth, and your phone number if you gave one. Payment details are handled entirely by Razorpay — we never see or store your card number, UPI ID or bank details.

How your birth data is protected

The sensitive parts of your chart — your birth date, time, location and place name — are encrypted at rest using AES-256-GCM, a strong, modern standard. The key that unlocks them lives only in our server's environment, never in the database. Even someone with database access can't read those fields. They're decrypted only for a moment, inside our own systems, while your report is being made.

Who we share it with

Only the providers needed to deliver your reading:

• Razorpay — to take payment (they need your name, email and the amount).
• ZeptoMail — to email you your report.
• Cloudflare R2 — to store your encrypted PDF.
• Our own astrology engine — to work out your chart, on our own systems.

We never sell your data and never share it for marketing. We don't run advertising trackers that profile you. Our visitor counter is self-hosted, respects your browser's "Do Not Track" setting, and counts pages — not people.

The AI astrologer and your chats

When conversation history is available, we store the questions you ask Yana and the AI-generated answers, linked to your account, so you can revisit them. The text is encrypted at rest and automatically deleted after 180 days. You can delete one conversation or all conversation history at any time; doing so does not remove purchased credits.

To generate an answer, we send Anthropic only the question you typed and the astrological placements needed for that answer. We do not send your name, email, or raw date, time, or place of birth, and your conversations are not used to train external AI models.

Your data controls and future DPDP rights

Astroyana provides these controls now as service commitments. The corresponding rights provisions in India's Digital Personal Data Protection Act commence on 13 May 2027:

• Export everything we hold, any time.
• Correct anything that's wrong.
• Delete your account and data — with a 30-day grace window in case you change your mind.

The step-by-step is in Delete my account and data. For our full written commitments, see the Privacy Policy. Questions? Write to [email protected].